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CLAIMS 

What is claimed is: 

1 . A distributed redundant control signal distribution system, said control system 
comprising: 

a first control signal source co-located with a first set of control signal controlled circuit 
elements; 

at least one second control signal source co-located with a second set of control signal 
controlled circuit elements; and 

at least one controller for providing control signals from said first control signal source to 
control both said first and second sets of controlled circuit elements; said controller operable for 
substituting signals from said second control signal source for signals from said first control 
signal source if said signals from said first control signal source become unavailable to either 
said first or second circuit elements. 

2. The system of claim 1 wherein said control signal sources are system clocks. 

3. The system of claim 1 wherein said first and second sets of circuit elements are 
interconnected by at least two transmission paths and wherein said controlling signals travel over 
both of said transmission paths. 

4. The system of claim 3 wherein said at least one controller enables said controlling 
signals to control both sets of controlled circuit elements even when one of said transmission 
paths is inoperative. 

5. The system of claim 1 wherein said at least one controller comprises a multiplexer 
for accepting signals on its input from said first and second control signal sources, said 
multiplexer operable for selecting which one of said control signals controls said controlled 
circuit elements. 

6. The system of claim 5 wherein said multiplexer has a preset hierarchical control 
among its respective inputs. 

7. The system of claim 5 wherein said multiplexer is co- located with said first set of 
controlled circuit elements. 
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8. The system of claim 7 wherein said at least one controller further comprises a 
second multiplexer for accepting on its input signals from said first and second control signal 
sources, said multiplexer operable for selecting which one of said control signals controls said 
controlled circuit elements; and 

wherein said second multiplexer is co-located with said second set of controlled circuit 
elements. 

9. The system of claim 1 further comprising at least a third set of control signal 
controlled circuit elements wherein signals from said first control signal source control said third 
set of controlled circuit elements, said third set of controlled circuit having co-located therewith 
a controller for substituting signals from said second control signal source for said signals from 
said first signal control source if said signals from said first signal control source become 
unavailable. 

10. The system of claim 9 wherein said last-mentioned controller comprises a 
multiplexer for accepting on its input a redundant set of control signals, said multiplexer 
operable for selecting which one of said redundant set of control signals controls said third set of 
controlled circuit elements. 

1 1 . The system of claim 10 wherein said at least one controller comprises a second 
multiplexer co-located with said first set of controlled circuit elements for accepting on its input 
said first and second control signals, said second multiplexer operable for selecting which one of 
the control signals control said first set of controlled circuit elements; and 

wherein said at least one controller further comprises a third multiplexer co-located with 
said second set of controlled circuit elements for accepting on its input said first and second 
control signals, said third multiplexer operable for selecting which one of said control signals 
controls said second set of controlled circuit elements. 
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12. A method for distributing control signals among a plurality of electronic boards, 
each electronic board having associated therewith control signal controlled circuitry, said method 
comprising; 

accepting, on each of said plurality of electronic boards, control signals originating from 
a first and second one of said electronic boards; and 

on each said first and second board hierarchically controlling said control signals such 
that either said control signals originating from said first or from said second electronic boards 
are operative to control said controlled signal controlled circuitry on all of said electronic boards. 

13. The method of claim 12 wherein said electronic boards are interconnected with 
redundant connections; and 

wherein said hierarchically control signals are switched from a first to a second 
connection upon detection of a lack of a control signal on said first connection. 

14. The method of claim 13 wherein said hierarchical control is operable for allowing 
said control signals originating from said first electronic board to dominate, followed by control 
signals originating from said second electronic board. 

15. The method of claim 13 wherein on said second electronic board said hierarchy 
control allows signals originating on said first electronic board and provided to said second 
electronic board over a pair of transmission links to dominate over said control signals 
originating on said second electronic board. 

16. A system for controlling clock signals for a plurality of electronic boards, said 
system comprising: 

a clock source on at least two of said electronic boards; 

at least one signal connection between all of said electronic boards, each said signal 
connection allowing clock signals to pass between said plurality of boards; 

a controller on each of said boards, said controller operable for hierarchically selecting 
clock signals from at least one of said signal connections; and 

wherein said signal controllers on said first and second electronic boards are further 
operable for hierarchically selecting one or the other of said clock sources. 
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17. The system of claim 16 wherein the hierarchy is such that said controllers only 
select the clock source from said second one of said boards when the clock source from said first 
one of said boards is not available. 

18. The system of claim 17 wherein said controllers are multiplexers. 

19. The system of claim 16 wherein said at least one signal connector is a plurality of 
independent transmission paths; and 

wherein said controllers accept signals from each of said transmission paths for said 
hierarchical selection. 

20. A method for protecting electronic circuits from dual clocking signal failures, said 
method comprising: 

interconnecting said electronic circuits with dual independent clock signal transmission 
facilities; 

providing to the input of a controller on each electronic circuit a clock signal generated 
local to said controller, the output of said controller supplying clock signals for circuitry local to 
said controller, said output further supplying clock signals as inputs to said dual independent 
transmission facilities; 

providing to said input of said controller, clock signals from each of said signal 
transmission facilities; and 

hierarchically selecting one of said inputs for presentation of the signals on said selected 
input to said output of said controller. 
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